ABSTRACT OF THE DISCLOSURE 


Authorizing a requesting entity to have a service perform a particular action in a 
manner that is at least partially independent of the underlying target data structure. An 
authorization station maintains a number of role templates that each define basic access 
permissions with respect to a number of command methods. The authorization station also 
maintains a number of role definitions that each define access permissions for specific 
requesting entities by using one or more of the role templates. When the authorization 
station receives a request from the requesting entity, the authorization station then 
identifies the appropriate role definition. Using this role definition, the authorization 
station determines access permissions for the requesting entity with respect to the 
requested action. 
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